{"id":"https://openalex.org/W7130617151","doi":"https://doi.org/10.1109/fllm67465.2025.11391120","title":"Efficient Privacy-Preserving Retrieval Augmented Generation with Distance-Preserving Encryption","display_name":"Efficient Privacy-Preserving Retrieval Augmented Generation with Distance-Preserving Encryption","publication_year":2025,"publication_date":"2025-11-25","ids":{"openalex":"https://openalex.org/W7130617151","doi":"https://doi.org/10.1109/fllm67465.2025.11391120"},"language":null,"primary_location":{"id":"doi:10.1109/fllm67465.2025.11391120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/fllm67465.2025.11391120","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 3rd International Conference on Foundation and Large Language Models (FLLM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009835958","display_name":"Huanyi Ye","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Huanyi Ye","raw_affiliation_strings":["Nanyang Technological University,College of Computing and Data Science,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,College of Computing and Data Science,Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074780040","display_name":"Jiale Guo","orcid":"https://orcid.org/0000-0003-1457-6804"},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jiale Guo","raw_affiliation_strings":["Digital Trust Centre (DTC),Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Digital Trust Centre (DTC),Singapore","institution_ids":["https://openalex.org/I4210108443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101492724","display_name":"Ziyao Liu","orcid":"https://orcid.org/0000-0003-4060-0839"},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Ziyao Liu","raw_affiliation_strings":["Digital Trust Centre (DTC),Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Digital Trust Centre (DTC),Singapore","institution_ids":["https://openalex.org/I4210108443"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5126414813","display_name":"Kwok-Yan Lam","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Kwok-Yan Lam","raw_affiliation_strings":["Nanyang Technological University,College of Computing and Data Science,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,College of Computing and Data Science,Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"668","last_page":"676"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.8560000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.8560000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.027300000190734863,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.020899999886751175,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7325000166893005},{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.722599983215332},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6502000093460083},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.48840001225471497},{"id":"https://openalex.org/keywords/private-information-retrieval","display_name":"Private information retrieval","score":0.4494999945163727},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.4478999972343445},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4406999945640564},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4205999970436096},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.4043000042438507}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8457000255584717},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7325000166893005},{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.722599983215332},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6502000093460083},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.48840001225471497},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.4494999945163727},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.4478999972343445},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4406999945640564},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4205999970436096},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.4043000042438507},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.40290001034736633},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3725999891757965},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.36980000138282776},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3628999888896942},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3529999852180481},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3513999879360199},{"id":"https://openalex.org/C3087436","wikidata":"https://www.wikidata.org/wiki/Q1386603","display_name":"Secret sharing","level":3,"score":0.3483999967575073},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.3138999938964844},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C179799912","wikidata":"https://www.wikidata.org/wiki/Q205084","display_name":"Computational complexity theory","level":2,"score":0.3018999993801117},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.2854999899864197},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2825999855995178},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2680000066757202},{"id":"https://openalex.org/C166501710","wikidata":"https://www.wikidata.org/wiki/Q5132476","display_name":"Client-side encryption","level":4,"score":0.266400009393692},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.26440000534057617},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.2624000012874603},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C163173736","wikidata":"https://www.wikidata.org/wiki/Q3308558","display_name":"Key generation","level":3,"score":0.26030001044273376},{"id":"https://openalex.org/C551230270","wikidata":"https://www.wikidata.org/wiki/Q4368942","display_name":"Data retrieval","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C93974786","wikidata":"https://www.wikidata.org/wiki/Q1589480","display_name":"Ciphertext","level":3,"score":0.25440001487731934},{"id":"https://openalex.org/C2776517306","wikidata":"https://www.wikidata.org/wiki/Q29017317","display_name":"Similarity measure","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/fllm67465.2025.11391120","is_oa":false,"landing_page_url":"https://doi.org/10.1109/fllm67465.2025.11391120","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 3rd International Conference on Foundation and Large Language Models (FLLM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6218594312667847}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W2146828512","https://openalex.org/W3156789018","https://openalex.org/W4294698950","https://openalex.org/W4309674289","https://openalex.org/W4385565351","https://openalex.org/W4385573970","https://openalex.org/W4389518671","https://openalex.org/W4389518895","https://openalex.org/W4389520346","https://openalex.org/W4393147129","https://openalex.org/W4396843633","https://openalex.org/W4405143982","https://openalex.org/W4412888780"],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"has":[3],"emerged":[4],"as":[5,128],"a":[6,57,68,299],"key":[7],"technique":[8],"for":[9,94,182,302],"enhancing":[10,249],"response":[11],"quality":[12],"of":[13],"large":[14],"language":[15],"models":[16],"(LLMs)":[17],"without":[18,244],"incurring":[19],"high":[20,291],"computational":[21,161],"cost.":[22],"It":[23],"works":[24],"by":[25,56,264],"retrieving":[26],"knowledge":[27],"and":[28,40,64,110,132,163,193,223,239,252],"fact":[29],"from":[30,275,279],"external":[31],"databases,":[32],"augmenting":[33],"the":[34,37,42,62,79,213,224,231,236,266,273],"prompt":[35],"with":[36],"retrieved":[38],"data,":[39],"enabling":[41],"LLM":[43],"to":[44,81,88,124,145,215,270],"generate":[45],"more":[46],"accurate":[47],"responses.":[48],"In":[49],"traditional":[50],"architectures,":[51],"RAG":[52,119,140,178],"services":[53,101],"are":[54,121],"provided":[55],"single":[58],"entity":[59],"that":[60,186,207,285],"hosts":[61],"dataset":[63],"issues":[65],"queries":[66],"within":[67],"trusted":[69],"local":[70],"environment.":[71],"However,":[72],"individuals":[73],"or":[74],"small":[75],"organizations":[76],"often":[77],"lack":[78],"resources":[80],"maintain":[82],"data":[83],"storage":[84,93],"servers,":[85],"leading":[86],"them":[87],"rely":[89,153],"on":[90,98,154],"outsourced,":[91],"cloud-based":[92],"scalability.":[95],"This":[96],"dependence":[97],"untrusted":[99,183],"third-party":[100],"introduces":[102],"significant":[103],"privacy":[104,125,251,263,295],"risks,":[105,259],"particularly":[106],"when":[107],"handling":[108],"private":[109],"sensitive":[111,277],"data.":[112],"Embedding-based":[113],"retrieval":[114,292],"mechanisms,":[115],"commonly":[116],"used":[117],"in":[118,167],"systems,":[120],"especially":[122],"vulnerable":[123],"leakage":[126,134],"such":[127,147],"vector-to-text":[129,189],"reconstruction":[130],"attacks":[131],"structural":[133],"via":[135],"vector":[136,191],"analysis.":[137,195],"Several":[138],"privacy-preserving":[139,177],"techniques":[141],"have":[142],"been":[143],"proposed":[144],"address":[146,170],"vulnerabilities;":[148],"however,":[149],"most":[150],"existing":[151],"approaches":[152],"partially":[155],"homomorphic":[156],"encryption,":[157,271],"which":[158],"incurs":[159],"substantial":[160],"overhead":[162],"limits":[164],"their":[165],"practicality":[166],"real-world":[168],"deployments.To":[169],"these":[171],"challenges,":[172],"we":[173,199,260],"propose":[174,200],"an":[175,219],"efficient":[176,288],"framework":[179],"(ppRAG)":[180],"tailored":[181],"cloud":[184,214,274],"environments":[185],"defends":[187],"against":[188],"attack,":[190],"analysis,":[192],"query":[194,221,238,257,267,280],"At":[196],"its":[197],"core,":[198],"Conditional":[201],"Approximate":[202],"Distance-Comparison-Preserving":[203],"Symmetric":[204],"Encryption":[205],"(CAPRISE)":[206],"encrypts":[208],"embeddings":[209],"while":[210],"still":[211],"allowing":[212],"compute":[216],"similarity":[217],"between":[218,235],"encrypted":[220,225,237,241],"embedding":[222,268],"database":[226,242],"embeddings.":[227],"CAPRISE":[228],"preserves":[229],"only":[230],"relative":[232],"distance":[233],"ordering":[234],"each":[240],"embedding,":[243],"exposing":[245],"inter-database":[246],"distances,":[247],"thereby":[248],"both":[250],"efficiency.":[253],"To":[254],"further":[255],"mitigate":[256],"analysis":[258],"introduce":[261],"differential":[262],"perturbing":[265],"prior":[269],"preventing":[272],"inferring":[276],"patterns":[278],"frequency.":[281],"Experimental":[282],"results":[283],"show":[284],"ppRAG":[286],"achieves":[287],"processing":[289],"throughput,":[290],"accuracy,":[293],"strong":[294],"guarantees,":[296],"making":[297],"it":[298],"practical":[300],"solution":[301],"resource-constrained":[303],"users":[304],"seeking":[305],"secure,":[306],"cloud-augmented":[307],"LLMs.":[308]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-02-20T00:00:00"}